Upgrade dependencies (#105)

* #104: Upgrade dependencies
exasol · Jun 9, 2022 · 70b1904 · 70b1904
1 parent d93f1f7
commit 70b1904
Show file tree

Hide file tree

Showing 7 changed files with 150 additions and 102 deletions.
diff --git a/.github/workflows/broken_links_checker.yml b/.github/workflows/broken_links_checker.yml
@@ -2,7 +2,7 @@ name: Broken Links Checker
 
 on:
  schedule:
- - cron: "0 5 * * *"
+ - cron: "0 5 * * 0"
  push:
  branches:
  - main
@@ -19,8 +19,8 @@ jobs:
  - name: Configure broken links checker
  run: |
  mkdir -p ./target
- echo '{ "aliveStatusCodes": [429, 200] }' > ./target/broken_links_checker.json
- - uses: gaurav-nelson/github-action-markdown-link-check@1.0.13
+ echo '{ "aliveStatusCodes": [429, 200], "ignorePatterns": [{"pattern": "^https?://(www.)?opensource.org"}] }' > ./target/broken_links_checker.json
+ - uses: gaurav-nelson/github-action-markdown-link-check@v1
  with:
  use-quiet-mode: 'yes'
  use-verbose-mode: 'yes'

diff --git a/dependencies.md b/dependencies.md
@@ -6,24 +6,25 @@
 | Dependency | License |
 | -------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
 | [Common Virtual Schema for document data][0] | [MIT][1] |
-| [Parquet for Java][2] | [MIT][1]  |
+| [Parquet for Java][2] | [MIT License][3] |
 | [error-reporting-java][4] | [MIT][1] |
 | [Jakarta JSON Processing API][6] | [Eclipse Public License 2.0][7]; [GNU General Public License, version 2 with the GNU Classpath Exception][8] |
-| [Performance Test Recorder Java][9] | [MIT][1] |
-| [Project Lombok][11] | [The MIT License][12] |
+| [Project Lombok][9] | [The MIT License][10] |
 
 ## Test Dependencies
 
 | Dependency | License |
 | -------------------------------------------- | --------------------------------- |
-| [Hamcrest][13] | [BSD License 3][14] |
-| [JUnit Jupiter Engine][15] | [Eclipse Public License v2.0][16] |
-| [JUnit Jupiter Params][15] | [Eclipse Public License v2.0][16] |
-| [mockito-core][19] | [The MIT License][20] |
-| [mockito-junit-jupiter][19] | [The MIT License][20] |
+| [Hamcrest][11] | [BSD License 3][12] |
+| [JUnit Jupiter Engine][13] | [Eclipse Public License v2.0][14] |
+| [JUnit Jupiter Params][13] | [Eclipse Public License v2.0][14] |
+| [mockito-core][17] | [The MIT License][18] |
+| [mockito-junit-jupiter][17] | [The MIT License][18] |
 | [Common Virtual Schema for document data][0] | [MIT][1] |
-| [Matcher for SQL Result Sets][25] | [MIT][1] |
-| [udf-debugging-java][27] | [MIT][1] |
+| [Matcher for SQL Result Sets][23] | [MIT][1] |
+| [udf-debugging-java][25] | [MIT][1] |
+| [exasol-test-setup-abstraction-java][27] | [MIT License][28] |
+| [Performance Test Recorder Java][29] | [MIT][1] |
 
 ## Runtime Dependencies
 
@@ -35,72 +36,75 @@
 
 | Dependency | License |
 | ------------------------------------------------------- | ---------------------------------------------- |
-| [SonarQube Scanner for Maven][32] | [GNU LGPL 3][33] |
-| [Apache Maven Compiler Plugin][34] | [Apache License, Version 2.0][35] |
-| [Apache Maven Enforcer Plugin][36] | [Apache License, Version 2.0][35] |
-| [Maven Flatten Plugin][38] | [Apache Software Licenese][39] |
-| [org.sonatype.ossindex.maven:ossindex-maven-plugin][40] | [ASL2][39] |
-| [Reproducible Build Maven Plugin][42] | [Apache 2.0][39] |
-| [Maven Surefire Plugin][44] | [Apache License, Version 2.0][35] |
-| [Versions Maven Plugin][46] | [Apache License, Version 2.0][35] |
-| [Apache Maven Deploy Plugin][48] | [Apache License, Version 2.0][35] |
-| [Apache Maven GPG Plugin][50] | [Apache License, Version 2.0][35] |
-| [Apache Maven Source Plugin][52] | [Apache License, Version 2.0][35] |
-| [Project keeper maven plugin][54] | [The MIT License][55] |
-| [Apache Maven JAR Plugin][56] | [Apache License, Version 2.0][35] |
-| [Apache Maven Javadoc Plugin][58] | [Apache License, Version 2.0][35] |
-| [Nexus Staging Maven Plugin][60] | [Eclipse Public License][61] |
-| [Lombok Maven Plugin][62] | [The MIT License][1] |
-| [JaCoCo :: Maven Plugin][64] | [Eclipse Public License 2.0][65] |
-| [error-code-crawler-maven-plugin][66] | [MIT][1] |
-| [Maven Clean Plugin][68] | [The Apache Software License, Version 2.0][39] |
-| [Maven Resources Plugin][70] | [The Apache Software License, Version 2.0][39] |
-| [Maven Install Plugin][72] | [The Apache Software License, Version 2.0][39] |
-| [Maven Site Plugin 3][74] | [The Apache Software License, Version 2.0][39] |
+| [SonarQube Scanner for Maven][34] | [GNU LGPL 3][35] |
+| [Apache Maven Compiler Plugin][36] | [Apache License, Version 2.0][37] |
+| [Apache Maven Enforcer Plugin][38] | [Apache License, Version 2.0][37] |
+| [Maven Flatten Plugin][40] | [Apache Software Licenese][41] |
+| [org.sonatype.ossindex.maven:ossindex-maven-plugin][42] | [ASL2][41] |
+| [Reproducible Build Maven Plugin][44] | [Apache 2.0][41] |
+| [Maven Surefire Plugin][46] | [Apache License, Version 2.0][37] |
+| [Versions Maven Plugin][48] | [Apache License, Version 2.0][37] |
+| [Apache Maven Deploy Plugin][50] | [Apache License, Version 2.0][37] |
+| [Apache Maven GPG Plugin][52] | [Apache License, Version 2.0][37] |
+| [Apache Maven Source Plugin][54] | [Apache License, Version 2.0][37] |
+| [Project keeper maven plugin][56] | [The MIT License][57] |
+| [Apache Maven JAR Plugin][58] | [Apache License, Version 2.0][37] |
+| [Apache Maven Javadoc Plugin][60] | [Apache License, Version 2.0][37] |
+| [Nexus Staging Maven Plugin][62] | [Eclipse Public License][63] |
+| [Lombok Maven Plugin][64] | [The MIT License][1] |
+| [JaCoCo :: Maven Plugin][66] | [Eclipse Public License 2.0][67] |
+| [error-code-crawler-maven-plugin][68] | [MIT][1] |
+| [Maven Clean Plugin][70] | [The Apache Software License, Version 2.0][41] |
+| [Maven Resources Plugin][72] | [The Apache Software License, Version 2.0][41] |
+| [Maven Install Plugin][74] | [The Apache Software License, Version 2.0][41] |
+| [Maven Site Plugin 3][76] | [The Apache Software License, Version 2.0][41] |
 
 [4]: https://github.com/exasol/error-reporting-java
-[2]: https://github.com/exasol/parquet-io-java
-[39]: http://www.apache.org/licenses/LICENSE-2.0.txt
-[11]: https://projectlombok.org
-[44]: https://maven.apache.org/surefire/maven-surefire-plugin/
-[60]: http://www.sonatype.com/public-parent/nexus-maven-plugins/nexus-staging/nexus-staging-maven-plugin/
-[68]: http://maven.apache.org/plugins/maven-clean-plugin/
+[41]: http://www.apache.org/licenses/LICENSE-2.0.txt
+[9]: https://projectlombok.org
+[46]: https://maven.apache.org/surefire/maven-surefire-plugin/
+[70]: http://maven.apache.org/plugins/maven-clean-plugin/
 [1]: https://opensource.org/licenses/MIT
-[19]: https://github.com/mockito/mockito
-[9]: https://github.com/exasol/performance-test-recorder-java
-[46]: http://www.mojohaus.org/versions-maven-plugin/
-[54]: https://github.com/exasol/project-keeper/
-[14]: http://opensource.org/licenses/BSD-3-Clause
-[34]: https://maven.apache.org/plugins/maven-compiler-plugin/
-[65]: https://www.eclipse.org/legal/epl-2.0/
-[48]: https://maven.apache.org/plugins/maven-deploy-plugin/
-[61]: http://www.eclipse.org/legal/epl-v10.html
-[33]: http://www.gnu.org/licenses/lgpl.txt
-[64]: https://www.jacoco.org/jacoco/trunk/doc/maven.html
-[20]: https://github.com/mockito/mockito/blob/main/LICENSE
-[12]: https://projectlombok.org/LICENSE
-[25]: https://github.com/exasol/hamcrest-resultset-matcher
-[42]: http://zlika.github.io/reproducible-build-maven-plugin
-[55]: https://github.com/exasol/project-keeper/blob/main/LICENSE
-[7]: https://projects.eclipse.org/license/epl-2.0
-[32]: http://sonarsource.github.io/sonar-scanner-maven/
-[35]: https://www.apache.org/licenses/LICENSE-2.0.txt
-[36]: https://maven.apache.org/enforcer/maven-enforcer-plugin/
-[62]: https://awhitford.github.com/lombok.maven/lombok-maven-plugin/
+[17]: https://github.com/mockito/mockito
+[3]: https://github.com/exasol/parquet-io-java/blob/main/LICENSE
+[40]: https://www.mojohaus.org/flatten-maven-plugin/
+[48]: http://www.mojohaus.org/versions-maven-plugin/
+[56]: https://github.com/exasol/project-keeper/
+[12]: http://opensource.org/licenses/BSD-3-Clause
+[36]: https://maven.apache.org/plugins/maven-compiler-plugin/
+[27]: https://github.com/exasol/exasol-test-setup-abstraction-java/
+[67]: https://www.eclipse.org/legal/epl-2.0/
+[50]: https://maven.apache.org/plugins/maven-deploy-plugin/
+[35]: http://www.gnu.org/licenses/lgpl.txt
+[66]: https://www.jacoco.org/jacoco/trunk/doc/maven.html
+[18]: https://github.com/mockito/mockito/blob/main/LICENSE
+[10]: https://projectlombok.org/LICENSE
+[23]: https://github.com/exasol/hamcrest-resultset-matcher
+[44]: http://zlika.github.io/reproducible-build-maven-plugin
+[28]: https://github.com/exasol/exasol-test-setup-abstraction-java/blob/main/LICENSE
+[34]: http://sonarsource.github.io/sonar-scanner-maven/
 [0]: https://github.com/exasol/virtual-schema-common-document/
-[27]: https://github.com/exasol/udf-debugging-java/
-[16]: https://www.eclipse.org/legal/epl-v20.html
-[72]: http://maven.apache.org/plugins/maven-install-plugin/
-[15]: https://junit.org/junit5/
-[40]: https://sonatype.github.io/ossindex-maven/maven-plugin/
-[50]: https://maven.apache.org/plugins/maven-gpg-plugin/
-[38]: https://www.mojohaus.org/flatten-maven-plugin/flatten-maven-plugin
+[25]: https://github.com/exasol/udf-debugging-java/
+[13]: https://junit.org/junit5/
 [6]: https://github.com/eclipse-ee4j/jsonp
-[52]: https://maven.apache.org/plugins/maven-source-plugin/
+[54]: https://maven.apache.org/plugins/maven-source-plugin/
 [8]: https://projects.eclipse.org/license/secondary-gpl-2.0-cp
-[13]: http://hamcrest.org/JavaHamcrest/
-[74]: http://maven.apache.org/plugins/maven-site-plugin/
-[70]: http://maven.apache.org/plugins/maven-resources-plugin/
-[58]: https://maven.apache.org/plugins/maven-javadoc-plugin/
-[66]: https://github.com/exasol/error-code-crawler-maven-plugin
-[56]: https://maven.apache.org/plugins/maven-jar-plugin/
+[11]: http://hamcrest.org/JavaHamcrest/
+[72]: http://maven.apache.org/plugins/maven-resources-plugin/
+[58]: https://maven.apache.org/plugins/maven-jar-plugin/
+[62]: http://www.sonatype.com/public-parent/nexus-maven-plugins/nexus-staging/nexus-staging-maven-plugin/
+[29]: https://github.com/exasol/performance-test-recorder-java
+[63]: http://www.eclipse.org/legal/epl-v10.html
+[57]: https://github.com/exasol/project-keeper/blob/main/LICENSE
+[7]: https://projects.eclipse.org/license/epl-2.0
+[37]: https://www.apache.org/licenses/LICENSE-2.0.txt
+[38]: https://maven.apache.org/enforcer/maven-enforcer-plugin/
+[14]: https://www.eclipse.org/legal/epl-v20.html
+[74]: http://maven.apache.org/plugins/maven-install-plugin/
+[42]: https://sonatype.github.io/ossindex-maven/maven-plugin/
+[52]: https://maven.apache.org/plugins/maven-gpg-plugin/
+[2]: https://github.com/exasol/parquet-io-java/
+[64]: https://anthonywhitford.com/lombok.maven/lombok-maven-plugin/
+[76]: http://maven.apache.org/plugins/maven-site-plugin/
+[60]: https://maven.apache.org/plugins/maven-javadoc-plugin/
+[68]: https://github.com/exasol/error-code-crawler-maven-plugin
diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md
@@ -1,5 +1,6 @@
 # Changes
 
+* [7.0.2](changes_7.0.2.md)
 * [7.0.1](changes_7.0.1.md)
 * [7.0.0](changes_7.0.0.md)
 * [6.0.2](changes_6.0.2.md)

diff --git a/doc/changes/changes_6.0.2.md b/doc/changes/changes_6.0.2.md
@@ -4,7 +4,7 @@ Code name: 6.0.2: Upgrade dependencies compare to 6.0.1
 
 ## Features
 
-* #98: Upgraded dependencies to fix [CVE-2022-21724](https://ossindex.sonatype.org/vulnerability/0f319d1b-e964-4471-bded-db3aeb3c3a29?component-type=maven&component-name=org.postgresql.postgresql&utm_source=ossindex-client&utm_medium=integration&utm_content=1.1.1) in the PostgreSQL JDBC driver.
+* #98: Upgraded dependencies to fix [CVE-2022-21724](https://nvd.nist.gov/vuln/detail/CVE-2022-21724) in the PostgreSQL JDBC driver.
 
 ## Dependency Updates
 

diff --git a/doc/changes/changes_7.0.2.md b/doc/changes/changes_7.0.2.md
@@ -0,0 +1,31 @@
+# Virtual Schema for document data in files 7.0.2, released 2022-06-09
+
+Code name: 7.0.2: Upgrade dependencies on 7.0.1
+
+## Summary
+
+This release fixes vulnerabilities in dependencies by updating compile dependency.
+
+## Features
+
+* #104: Upgraded dependencies to fix vulnerabilities
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:parquet-io-java:1.3.0` to `1.3.1`
+* Removed `com.exasol:performance-test-recorder-java:0.1.0`
+
+### Test Dependency Updates
+
+* Added `com.exasol:exasol-test-setup-abstraction-java:0.3.2`
+* Added `com.exasol:performance-test-recorder-java:0.1.0`
+* Updated `org.mockito:mockito-core:4.5.1` to `4.6.1`
+* Updated `org.mockito:mockito-junit-jupiter:4.5.1` to `4.6.1`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:project-keeper-maven-plugin:2.3.2` to `2.4.6`
+* Updated `org.codehaus.mojo:versions-maven-plugin:2.10.0` to `2.11.0`
+* Updated `org.jacoco:jacoco-maven-plugin:0.8.7` to `0.8.8`
diff --git a/pk_generated_parent.pom b/pk_generated_parent.pom
@@ -3,7 +3,7 @@
  <modelVersion>4.0.0</modelVersion>
  <groupId>com.exasol</groupId>
  <artifactId>virtual-schema-common-document-files-generated-parent</artifactId>
- <version>7.0.1</version>
+ <version>7.0.2</version>
  <packaging>pom</packaging>
  <properties>
  <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -36,7 +36,7 @@
  <dependency>
  <groupId>org.projectlombok</groupId>
  <artifactId>lombok</artifactId>
- <version>1.18.20</version>
+ <version>1.18.24</version>
  <scope>provided</scope>
  </dependency>
  </dependencies>
@@ -50,7 +50,7 @@
  <plugin>
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-compiler-plugin</artifactId>
- <version>3.9.0</version>
+ <version>3.10.1</version>
  <configuration>
  <source>${java.version}</source>
  <target>${java.version}</target>
@@ -104,7 +104,7 @@
  <plugin>
  <groupId>org.sonatype.ossindex.maven</groupId>
  <artifactId>ossindex-maven-plugin</artifactId>
- <version>3.1.0</version>
+ <version>3.2.0</version>
  <executions>
  <execution>
  <id>audit</id>
@@ -143,7 +143,7 @@
  <plugin>
  <groupId>org.codehaus.mojo</groupId>
  <artifactId>versions-maven-plugin</artifactId>
- <version>2.8.1</version>
+ <version>2.10.0</version>
  <executions>
  <execution>
  <id>display-updates</id>
@@ -202,7 +202,7 @@
  <plugin>
  <groupId>org.apache.maven.plugins</groupId>
  <artifactId>maven-javadoc-plugin</artifactId>
- <version>3.3.1</version>
+ <version>3.4.0</version>
  <executions>
  <execution>
  <id>attach-javadocs</id>
@@ -222,7 +222,7 @@
  <plugin>
  <groupId>org.sonatype.plugins</groupId>
  <artifactId>nexus-staging-maven-plugin</artifactId>
- <version>1.6.8</version>
+ <version>1.6.13</version>
  <configuration>
  <autoReleaseAfterClose>true</autoReleaseAfterClose>
  <serverId>ossrh</serverId>
@@ -272,7 +272,7 @@
  <plugin>
  <groupId>org.jacoco</groupId>
  <artifactId>jacoco-maven-plugin</artifactId>
- <version>0.8.7</version>
+ <version>0.8.8</version>
  <executions>
  <execution>
  <id>prepare-agent</id>
@@ -313,7 +313,7 @@
  <plugin>
  <groupId>com.exasol</groupId>
  <artifactId>error-code-crawler-maven-plugin</artifactId>
- <version>1.1.0</version>
+ <version>1.1.1</version>
  <executions>
  <execution>
  <id>verify</id>